splitVector "errmsg" : "not authorized on test to execute command

最新推荐文章于 2021-07-01 15:24:06 发布

oO寒枫Oo

最新推荐文章于 2021-07-01 15:24:06 发布

阅读量3.1k

点赞数 1

CC 4.0 BY-SA版权

分类专栏： Mongodb

本文链接：https://blog.youkuaiyun.com/lxpbs8851/article/details/53119323

Mongodb 专栏收录该内容

5 篇文章

订阅专栏

mongodb开启权限之后

splitVector 需要的权限。

user: test_da

db: test

拥有管理元权限都不能执行成功：

> db.system.users.find();

{ "_id" : "admin.dba", "user" : "dba", "db" : "admin", "credentials" : { "SCRAM-SHA-1" : { "iterationCount" : 10000, "salt" : "q5TKyUEuYqP9hgTbrCsITQ==", "storedKey" : "6g15leywZRsVMDldLi+uzTypFqs=", "serverKey" : "JWcdgRShUZMcEJk+vh71E11zoXc=" } }, "roles" : [ { "role" : "userAdminAnyDatabase", "db" : "admin" } ] }
{ "_id" : "test.test_da", "user" : "test_da", "db" : "test", "credentials" : { "SCRAM-SHA-1" : { "iterationCount" : 10000, "salt" : "y+IxIWUp50tA/7V6WPsEsw==", "storedKey" : "8UyEZA3HkcqbMOt0Fbrsjs/M090=", "serverKey" : "Zdbm+6bujOMJnDvILZvmEFfuxJ0=" } }, "roles" : [ { "role" : "userAdminAnyDatabase", "db" : "admin" }, { "role" : "readWriteAnyDatabase", "db" : "admin" }, { "role" : "dbAdminAnyDatabase", "db" : "admin" } ] }

{ "_id" : "admin.test_da", "user" : "test_da", "db" : "admin", "credentials" : { "SCRAM-SHA-1" : { "iterationCount" : 10000, "salt" : "hc4oe75lJQynskBcK94s1g==", "storedKey" : "IV0vwdd1Yo7YqraHAHcsd0I6ypY=", "serverKey" : "8bv/5MH5EuEvlvuuMpT8//rzGeg=" } }, "roles" : [ { "role" : "userAdminAnyDatabase", "db" : "admin" }, { "role" : "readWriteAnyDatabase", "db" : "admin" }, { "role" : "dbAdminAnyDatabase", "db" : "admin" }, { "role" : "__system", "db" : "admin" } ] }

报错信息：

> db.runCommand({splitVector: "test.nxtest_full", keyPattern: {_id: 1}, maxChunkSizeBytes: 32000000}) ;
{
"ok" : 0,
"errmsg" : "not authorized on test to execute command { splitVector: \"test.nxtest_full\", keyPattern: { _id: 1.0 }, maxChunkSizeBytes: 32000000.0 }",
"code" : 13
}

解决办法：

use test
db.updateUser("test_da", {
roles : [
{ role: "readWrite", db: "test" },
{ role : "clusterManager", db : "admin" }
]

})

只需要给 clusterManager 角色就可以了，而不是管理员角色就拥有所有权限。